Ege Kapı Pencere Bağlantı Elemanları LTD. ŞTİ.
Ege Kapı Pencere Bağlantı Elemanları LTD. ŞTİ. (the “Company”), in its capacity as data controller, informs you under Personal Data Protection Law No. 6698 (the “Law”, KVKK) about the processing of personal data in connection with requests submitted through the website and online payment transactions.
1. Data controller and contact details
Trade name: Ege Kapı Pencere Bağlantı Elemanları LTD. ŞTİ.
Address: Hürriyet Mahallesi Süleyman Demirel Bulvarı 18A D:26, 35473 İZDEP – Menderes / İzmir, Türkiye
Website: egebaglanti.com.tr
KVKK application email: [Email address that will receive applications]
REM (KEP) address: [REM address, if any; otherwise remove this line]
2. Personal data processed and method of collection
Your personal data is obtained through the contact form on the website, the online payment screen, transaction results received from the payment service provider and electronic correspondence relating to your requests, by fully or partially automated means, or by non-automated means as part of a data recording system.
The personal data processed by the Company in these processes is listed below:
- Identity and contact data: First name, last name, company name, email address and telephone number.
- Customer and payment transaction data: Current account / company name, payment amount, transaction reference, transaction date and transaction result.
- Request and application data: The subject selected in the contact form and the content of the message written.
- Transaction security data: [IP address, access time and security logs actually kept].
Payment infrastructure service provider: [Trade name of the bank or payment institution]. Explanation regarding the processing of card details: [Explain, according to the actual integration, which party collects card details, which card data the Company can access and whether it is stored].
3. Purposes of processing and legal grounds
Personal data is processed for the following purposes and on the following legal grounds, provided that it is necessary and proportionate for the relevant transaction:
- For carrying out customer transactions, collecting payments online, matching payments with the relevant debt or transaction and notifying the payment result, [data fields used for this purpose] are processed on the legal ground that processing is necessary for the establishment or performance of a contract (Law art. 5/2-c).
- For fulfilling invoicing, accounting and statutory record-keeping, retention and notification obligations, [data fields used for this purpose] are processed on whichever of the following conditions applies to the relevant processing: it is expressly provided for by law and/or it is mandatory for the Company to fulfil its legal obligation (Law art. 5/2-a and art. 5/2-ç).
- For managing payment objections, disputes and legal claims, [data fields used for this purpose] are processed on the legal ground that processing is mandatory for the establishment, exercise or protection of a right (Law art. 5/2-e).
- For ensuring the security of the website and payment transactions and preventing unauthorised access and misuse, [data fields used for this purpose] are processed on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms (Law art. 5/2-f).
Purpose of processing and legal ground for other requests submitted through the website: [Specify the data fields used according to the type of request, the specific purpose and the applicable processing condition under art. 5 of the Law].
This privacy notice is not a declaration of explicit consent. If there is a separate processing activity based on explicit consent, separate information will be provided about that activity and explicit consent will be obtained separately.
4. Transfer of personal data
Your personal data is transferred to the following groups of recipients, limited to the stated purposes and to the extent necessary, within the framework of the conditions in Article 8 of the Law:
- To [trade name of the bank or payment institution actually used], for carrying out payment and collection transactions and obtaining transaction results: [data fields transferred].
- To [hosting, software or technical support providers that actually receive data], for hosting the website, providing technical support and ensuring its security: [data fields transferred].
- To [the financial advisor, accounting service provider or legal advisor to whom data is actually transferred], for keeping accounting records or managing legal disputes: [data fields transferred].
- To authorised public institutions and judicial authorities, where required by legislation or where there is a lawful request from a competent authority, for fulfilling legal obligations: [relevant data fields].
Transfers abroad: [State whether there is any transfer abroad or access from abroad for hosting, backup, email and other services. If so, specify the categories of data transferred, the recipients, the purposes of transfer and the transfer mechanism applied under Article 9 of the Law].
5. Retention and data security
Your personal data is retained for the periods stipulated in the relevant legislation and for as long as required by the purpose of processing. When all reasons requiring its processing cease to exist, it is erased, destroyed or anonymised in accordance with Article 7 of the Law and the relevant legislation. The Company takes the necessary technical and administrative measures to prevent the unlawful processing of and access to personal data and to ensure its safekeeping.
6. Your rights under the Law
Pursuant to Article 11 of the Law, you may exercise the following rights by applying to the Company:
- To learn whether your personal data is processed and, if so, to request information about it.
- To learn the purpose of processing and whether the data is used in accordance with that purpose.
- To know the third parties to whom your data is transferred in Türkiye or abroad.
- To request the correction of incomplete or inaccurately processed data.
- To request the erasure or destruction of your data within the framework of the conditions in Article 7 of the Law.
- To request that the correction, erasure or destruction be notified to third parties to whom your data has been transferred.
- To object to a result to your detriment arising from the analysis of data exclusively through automated systems.
- To claim compensation for damages if you suffer damage due to unlawful processing of data.
7. Application method
You may submit your requests regarding your rights in writing to [application address], in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. You may also apply to [KVKK application email] using the email address you have previously notified to the Company and that is registered in our system. Other application methods available under the Communiqué are reserved.
Your application must include your name and surname, your signature for written applications, your T.R. identity number for citizens of the Republic of Türkiye; for foreign nationals, your nationality and passport number or identity number if any; your residential or business address for notifications, your email address for notifications if any, your telephone and fax number, and your request. Information and documents relating to the matter should be attached to your application.
Your applications are concluded free of charge as soon as possible according to the nature of the request and within thirty days at the latest. If the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.